We hold your most precious words. Here's exactly how we protect them, deliver them, and honor your legacy — transparently, forever.
No letter is ever sent without verified, multi-party confirmation. Here's the exact process.
Each of your three trusted contacts receives an independent secure link. All three must confirm separately — no single person can trigger delivery alone.
After confirmation, your chosen safety delay (default 14 days, up to 90) starts. You can log in at any time to cancel — your login instantly halts all releases.
Letters are sent in the order and on the schedule you specified. Our team reviews all physical mail orders before dispatch.
We designed our security so that even we can't read your letters. Here's how.
All letters, videos, and documents are encrypted using AES-256 — the same standard used by banks and governments. Encryption keys are unique to your account.
Every byte sent between your browser and our servers travels over TLS 1.3 encryption. Intercepting your data in transit is cryptographically infeasible.
Our support team cannot read your letter content. Content is decrypted only at the moment of delivery to the verified recipient.
Your data is backed up daily across geographically separate data centers. Backups are themselves encrypted and tested regularly.
Simplified Encryption Flow
We require real people you trust — not automated systems — to confirm before anything is released.
We require all three of your designated contacts to independently confirm. This prevents any single person from acting unilaterally.
Each year, we ask your trusted contacts to reconfirm their role. This ensures your contacts are still active, reachable, and willing.
If trusted contacts disagree or if conflicting signals are received, our team manually reviews before any delivery proceeds.
Any login to your account during the safety delay period immediately cancels all pending releases — a simple, foolproof safeguard.
What happens to your legacy if something happens to us? We've planned for that.
We maintain a dedicated reserve to honor all delivery obligations for at least 5 years beyond any platform event.
Our Terms of Service include binding delivery obligations. An independent trustee holds authority to enforce them.
Your data is never held hostage. Export everything — letters, videos, documents — in a standard format, anytime.
No lock-in. No hoops. Download everything, anytime.
Letters & drafts
All content as PDF and plain text
Vault documents
Original files in their uploaded format
Contacts & settings
Full account data as JSON
We believe in earning your trust every month, not trapping you.
When you cancel, your account moves to read-only mode for 30 days so you can export anything you need. After 30 days, your data is permanently and securely deleted — no residual copies.
Honest answers to the things that matter most to you and your loved ones.